IBM QRadar SIEM

CVE-2018-1725

LOW 3.2

At a glance

IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440.

Version	Score	Vector	Scored by
CVSS 3.0	LOW 3.2	CVSS:3.0/A:N/AV:L/I:N/S:C/PR:H/C:L/AC:L/UI:N/E:U/RL:O/RC:C	ibm
CVSS 3.1	LOW 2.3	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N	NVD · nvd@nist.gov (Primary)
CVSS 3.0	LOW 3.2	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N	NVD · psirt@us.ibm.com (Secondary)
CVSS 2.0	LOW 2.1	AV:L/AC:L/Au:N/C:P/I:N/A:N	NVD · nvd@nist.gov (Primary)

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:* ≥ 7.3.0 ≤ 7.3.3
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:-:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p2:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p3:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p4:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p5:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.1:-:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.1:patch1:*:*:*:*:*:*

Product	Versions
IBM · QRadar SIEM	affected 7.3.0 ; affected 7.4 ; affected 7.3.3.Patch.5 ; affected 7.4.1.Patch.1

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD